Use the adminAuth middleware, not collabAuth